This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer File: 4cWfpaa8h2985KRsqq5gYE8FGGY.cer (raw, json) Hash identifier: aOxRkWhw+DD0VirEmUsSbZucco0Ej75WhzwCRU9eaUo= Subject key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E3A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 10:07:51 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 43.243.72.0/22 IP: 103.230.228.0/22 IP: 2405:fcc0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 07:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163386 (0x27e3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 15 10:07:51 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:ed:f9:1d:65:77:70:44:45:d6:ee:35:21: 15:8f:67:6f:ef:31:1d:ec:ae:03:d8:12:93:cb:d4: 3c:e6:ee:12:54:70:3b:cd:9b:95:7a:bb:61:3a:2a: d7:a2:b9:91:c5:6e:27:de:1a:a5:ba:23:dd:75:01: b2:00:5a:6f:0a:59:e2:d5:e1:2a:d4:75:10:36:72: 4e:90:8a:3f:7b:f0:67:be:5c:27:10:3c:35:f9:4b: 52:f3:4a:88:8c:e2:68:fb:42:8d:88:0c:ad:62:02: ae:da:19:6a:a7:6b:68:3c:8b:66:58:d7:75:52:0a: 7e:b2:2e:75:c9:01:aa:82:10:67:4a:8e:48:14:bd: 0a:fe:e3:f5:40:30:a6:01:3b:1d:b1:35:2b:84:28: 71:b7:df:55:d2:3b:3d:70:47:21:39:12:9f:14:69: c2:cc:9e:58:cc:45:68:5f:2b:a0:19:a3:bc:b7:e0: 30:9b:d6:af:9b:9e:54:dc:9e:30:93:5f:a2:35:82: 24:a5:e3:f2:ee:ed:8f:6f:fd:34:58:e7:e4:0c:8c: 62:6c:1a:b0:b2:f7:58:b7:c1:32:15:28:75:55:1d: f2:9c:bc:ce:6b:46:68:fd:96:42:4e:cc:ea:cf:a3: a4:a6:3c:f7:c2:16:03:ca:d3:d4:a9:1e:2a:97:48: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.72.0/22 103.230.228.0/22 IPv6: 2405:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption 31:79:7b:00:38:92:24:75:d8:52:ba:84:e0:c3:10:9a:40:35: 82:66:a0:ba:7f:84:95:75:ff:36:9a:22:08:df:af:94:fa:ca: d6:59:22:b0:33:1e:1b:ff:b4:65:39:b0:47:d6:ee:ef:2b:cc: 44:60:51:f3:a6:0f:ea:84:d0:3b:11:6c:26:d7:b3:c2:1b:de: 29:8f:ef:38:41:c3:c2:cf:c4:02:e1:15:a3:68:26:10:49:39: 16:70:98:f2:a2:e1:df:4a:9d:7d:1f:eb:c5:5b:1e:01:d9:88: cd:0a:54:84:9e:1a:82:af:ea:cd:08:81:e8:e8:34:27:59:e6: 8a:17:fb:f3:55:37:2f:3e:8d:b7:7e:9b:78:c8:fd:66:95:f3: be:31:87:94:3a:9a:1c:bf:c1:01:1c:6f:0f:20:42:a9:62:f5: fd:0a:aa:3d:d3:ed:fd:8f:36:78:bf:51:e3:da:2d:59:ca:e4: e1:a4:42:83:59:88:43:60:99:32:6e:f2:f5:6e:c2:2d:45:33: 2f:e0:c0:00:b8:74:b8:e2:01:37:bf:07:ad:8b:6a:03:6e:32: e8:d9:40:8e:f5:4b:4b:0f:40:58:2a:a4:d8:2d:fc:a7:90:8a: 3c:b6:4d:78:77:6e:93:71:14:47:9c:9f:6b:60:26:97:88:b4: 98:3e:b6:75 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgIDAn46MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNTEwMDc1MVoXDTI2MDczMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkVERTcxMTAvBgNVBAUTKEUxQzU5RkE1QTZCQzg3NkY3Q0U0QTQ2 Q0FBQUU2MDYwNEYwNTE4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChQO35HWV3cERF1u41IRWPZ2/vMR3srgPYEpPL1Dzm7hJUcDvNm5V6u2E6Ktei uZHFbifeGqW6I911AbIAWm8KWeLV4SrUdRA2ck6Qij978Ge+XCcQPDX5S1LzSoiM 4mj7Qo2IDK1iAq7aGWqna2g8i2ZY13VSCn6yLnXJAaqCEGdKjkgUvQr+4/VAMKYB Ox2xNSuEKHG331XSOz1wRyE5Ep8UacLMnljMRWhfK6AZo7y34DCb1q+bnlTcnjCT X6I1giSl4/Lu7Y9v/TRY5+QMjGJsGrCy91i3wTIVKHVVHfKcvM5rRmj9lkJOzOrP o6SmPPfCFgPK09SpHiqXSP6dAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQU4cWfpaa8 h2985KRsqq5gYE8FGGYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZFREU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRURFNy9FN0ZEMzA1OEQ5OUQxMUYwQkJFNzgzOTk2NkQzNjQxRC80Y1dmcGFh OGgyOTg1S1JzcXE1Z1lFOEZHR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj MBIEAgABMAwDBAIr80gDBAJn5uQwDQQCAAIwBwMFACQF/MAwDQYJKoZIhvcNAQEL BQADggEBADF5ewA4kiR12FK6hODDEJpANYJmoLp/hJV1/zaaIgjfr5T6ytZZIrAz Hhv/tGU5sEfW7u8rzERgUfOmD+qE0DsRbCbXs8Ib3imP7zhBw8LPxALhFaNoJhBJ ORZwmPKi4d9KnX0f68VbHgHZiM0KVISeGoKv6s0IgejoNCdZ5ooX+/NVNy8+jbd+ m3jI/WaV874xh5Q6mhy/wQEcbw8gQqli9f0Kqj3T7f2PNni/UePaLVnK5OGkQoNZ iENgmTJu8vVuwi1FMy/gwAC4dLjiATe/B62LagNuMujZQI71S0sPQFgqpNgt/KeQ ijy2TXh3bpNxFEecn2tgJpeItJg+tnU= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:35 2025 by rpki-client